Skip to content

fix(kbve): resolve CodeQL non-HTTPS URL alert #264#8129

Merged
h0lybyte merged 1 commit intodevfrom
trunk/fix-codeql-264-1773704650
Mar 16, 2026
Merged

fix(kbve): resolve CodeQL non-HTTPS URL alert #264#8129
h0lybyte merged 1 commit intodevfrom
trunk/fix-codeql-264-1773704650

Conversation

@h0lybyte
Copy link
Member

Summary

  • Fixes CodeQL code-scanning alert Patch atomic saber pablo sfx nov10evening #264 (rust/non-https-url)
  • Replaced hardcoded http://n8n:5678/workflows with N8N_WORKFLOWS_URL env var
  • Default value is https://automation.kbve.com/workflows (the HTTPS public endpoint)
  • For k8s/Docker deployments, set N8N_WORKFLOWS_URL=http://n8n:5678/workflows in the pod env

Test plan

Move internal n8n URL to N8N_WORKFLOWS_URL env var with HTTPS default,
removing the hardcoded http:// URL. Resolves CodeQL alert #264
(rust/non-https-url).
@github-actions
Copy link
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@h0lybyte h0lybyte merged commit b7edec5 into dev Mar 16, 2026
5 checks passed
@h0lybyte h0lybyte deleted the trunk/fix-codeql-264-1773704650 branch March 16, 2026 23:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant